IN THE CLAIMS 

1 . (Original) A method for performing a computational task associated with a cryptographic 
protocol in a distributed manner using a plurality of machines, the plurality of machines comprising 
an originator machine and at least one additional machine, the method comprising the steps of: 

transforming a computational task involving a given input in the originator machine, 
the transforming of the computational task involving at least an error-related operation, a blinding 
operation and a permutation operation; 

sending the transformed computational task to the at least one additional machine for 

execution; 

receiving one or more results of the transformed computational task in the originator 

machine; and 

transforming the one or more results of the transformed computational task in the 
originator machine in a manner which permits verification that the one or more results are 
appropriate results for the given input. 

2. (Currently amended) The method of claim 1 wherein the opera t ion computational task 
associated with the cryptographic protocol comprises an exponentiation operation. 

3. (Original) The method of claim 1 wherein the cryptographic protocol comprises a digital 
signature protocol. 

4. (Original) The method of claim 1 wherein at least a subset of the originator machine and 
the at least one additional machine each comprise one or more servers associated with a computer 
network. 

5. (Original) The method of claim 1 wherein the originator machine and the at least one 
additional machine communicate over a network. 
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6. (Original) The method of claim 1 wherein the originator machine includes a card reader 
configured to read information relating to the cryptographic protocol from a smart card. 

7. (Original) The method of claim 1 wherein the blinding operation is applied to an output 
of the error-related operation, and the permutation operation is applied to an output of the blinding 
operation. 

8. (Original) The method of claim 1 wherein the error-related operation comprises a 
replication operation and a dependency operation. 

9. (Original) The method of claim 8 wherein the dependency operation is applied to an output 
of the replication operation. 

10. (Original) The method of claim 1 wherein the computational task to be transformed is 
a request to compute (g*' . . . . , g*" ) denoted by a vector G^ = (k^,..., k„) where g denotes a generator 
and A:,, . . . , ^„ denote portions of a secret key associated with the cryptographic protocol. 

1 1. (Original) The method of claim 1 wherein the error-related operation includes one or 
more replication operations. 

12. (Original) The method of claim 1 wherein the error-related operation includes a 
replication operation in which a first vector G, = (A:i, . . . , k„) is transformed into a second vector 

13. (Original) The method of claim 1 wherein the error-related operation includes a 
dependency operation in which dependencies are introduced between two or more computational 
tasks. 
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14, (Original) The method of claim 1 wherein the error-related operation includes a 
dependency operation in which dependencies are introduced transforming a computational task 
involving a set of exponents /tj, . . . , /:„ into a task involving the exponents k[,.,.,k'^ , where 



' [k.^ a- k._^ + y9 • A:._i mod q : \<i<n 



15. (Currently amended) The method of claim 1 wherein the blinding operation blinding for 
a vector {k^, . . . , A:„) is implemented by first choosing e random numbers r„ . . . e {0, . . . , }, 

and then, for each element kj with 1 <J <n,d elements are chosen and elements of a new vector are 
computed as 



= ^y -ZY/.y^ ^^^^ 
/=1 



where y,^- e {0, 1} and Z-^J / j = ^ ' 



1 6. (Original) The method of claim 1 wherein the permutation operation comprises applying 
a permutation 77 selected uniformly at random to a vector output of the blinding step to generate a 
new vector corresponding to the transformed computational task. 

17. (Original) The method of claim 1 wherein the results of the transformed computation are 
transformed by inversion of the permutation operation followed by inversion of the blinding 
operation, and the transformed results are verified based on information associated with the error- 
related operation. 

18. (Original) An apparatus for performing a computational task associated with a 
cryptographic protocol in a distributed manner using a plurality of machines, the plurality of 
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machines comprising an originator machine and at least one additional machine, the apparatus 
comprising: 

a processor associated with the originator machine and operative to transform a 
computational task involving a given input in the originator machine, the transforming of the 
computational task involving at least an error-related operation, a blinding operation and a 
permutation operation, to send the transformed computational task to the at least one additional 
machine for execution, to receive one or more results of the transformed computational task, and to 
transform the one or more results of the transformed computational task in a manner v^hich permits 
verification that the one or more results are appropriate results for the given input; and 

a memory coupled to the processor for at least temporarily storing at least a portion 
of the results of the transformed computational task. 

1 9. (Original) A computer-readable medium containing one or more programs for performing 
a computational task associated with a cryptographic protocol in a distributed manner using a 
plurality of machines, the plurality of machines comprising an originator machine and at least one 
additional machine, wherein the one or more programs when executed in a processor provide the 
steps of: 

transforming a computational task involving a given input in the originator machine, 
the transforming of the computational task involving at least an error-related operation, a blinding 
operation and a permutation operation; 

sending the transformed computational task to the at least one additional machine for 

execution; 

receiving one or more results of the transformed computational task in the originator 

machine; and 

transforming the one or more results of the transformed computational task in the 
originator machine in a manner which permits verification that the one or more results are 
appropriate results for the given input. 
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